kgretzky/evilginx2

Features

• Session-Based Authentication Proxies - The project intercepts and relays web authentication requests between a client and a target service to capture credentials and session tokens in real time.
• Man-in-the-Middle Frameworks - Intercepts and relays encrypted web traffic between a client and a target server to capture authentication credentials and session cookies.
• Phishing Attack Tools - | Creating realistic phishing simulations to educate employees on identifying malicious links and protecting their credentials during daily web authentication tasks.
• Session Hijacking - Implements session hijacking to bypass multi-factor authentication by capturing and reusing valid authentication cookies.
• Multi-Factor Authentication Bypass Testing - | Testing the resilience of authentication workflows against man-in-the-middle attacks that attempt to capture session cookies and bypass secondary verification.
• Certificate Lifecycle Management - The project manages the generation and automatic renewal of encryption certificates for proxied domains to ensure secure and seamless connections without manual intervention.
• Automated Certificate Management - Handles the automatic generation and renewal of encryption certificates to maintain secure connections for proxied domains without manual intervention.
• Offensive & Red Team Operations - | Automating the deployment of proxy servers and security certificates to conduct controlled security exercises while evading automated detection and filtering systems.
• Proxy Templates - Uses modular template definitions to dictate how specific web services are proxied and which authentication parameters are intercepted.
• Authentication Proxy Templates - Uses modular configuration files to dynamically rewrite web page content and intercept specific parameters during the authentication flow.
• Phishing - Man-in-the-middle framework for capturing credentials and session cookies.
• Social Engineering Tools - Framework for man-in-the-middle credential and session cookie harvesting.
• Phishing Campaign Orchestrators - The project integrates with external email delivery services to coordinate the distribution of links and track user interactions through a unified workflow.
• Traffic Routing - Resolves custom domain requests to redirect incoming traffic through the proxy infrastructure for specific target web services.
• Anti-Bot Evasion - The project applies obfuscation techniques and browser protection bypasses to ensure infrastructure remains undetected by security filters and automated analysis tools.
• Infrastructure Deployment - The project provisions servers and configures network settings, including domain names and security certificates, to establish operational environments with minimal manual intervention.
• Security Assessment Frameworks - A platform for deploying and managing automated phishing campaigns and testing organizational resilience against advanced credential harvesting attacks.
• Bot Blocking - Analyzes incoming request patterns to identify and block automated security scanners and non-human traffic from interacting with the proxy.
• Web Content Obfuscators - The project applies automated transformations to web code to evade browser-based security filters and detection mechanisms during data collection.
• Traffic Filtering - Filters incoming traffic to block automated bots and security scanners from interacting with the proxy infrastructure.

Star history